Source of this article and featured image is TechCrunch. Description and key fact are generated by Codevision AI system.

Google confirmed hackers stole data from over 200 companies through a supply chain attack involving Gainsight’s apps. The breach, linked to the Scattered Lapsus$ Hunters group, affected major firms like Atlassian and Verizon. Salesforce and Google emphasized the breach wasn’t due to platform vulnerabilities but rather third-party integrations. Some companies, including CrowdStrike, denied data exposure while others like Docusign took precautionary measures. This incident follows a prior hack targeting Salesloft and Drift customers, highlighting ongoing cybersecurity risks.

Key facts

  • Hackers stole data from over 200 companies via Gainsight’s apps in a supply chain attack.
  • The Scattered Lapsus$ Hunters group claimed responsibility for breaching Salesforce and other platforms.
  • Salesforce and Google stated the breach originated from third-party integrations, not platform flaws.
  • The attack is tied to a previous hack targeting Salesloft and Drift customers, where hackers stole authentication tokens.
  • Affected companies like Docusign and Thomson Reuters are investigating, while others deny data compromise.
See article on TechCrunch
TAGS: #corporate data theft  #cybersecurity  #cybersecurity breach  #Data Breach  #Gainsight  #hacking  #incident response  #Salesforce  #ShinyHunters  #supply chain attack